diff --git a/2023/0xxx/CVE-2023-0142.json b/2023/0xxx/CVE-2023-0142.json index 9b5ad14d79a..96121f29d7d 100644 --- a/2023/0xxx/CVE-2023-0142.json +++ b/2023/0xxx/CVE-2023-0142.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors." + "value": "Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors." } ] }, @@ -21,7 +21,8 @@ "description": [ { "lang": "eng", - "value": "CWE-427: Uncontrolled Search Path Element" + "value": "Uncontrolled Search Path Element", + "cweId": "CWE-427" } ] } @@ -57,7 +58,7 @@ { "version": "7.0", "status": "affected", - "lessThan": "7.0.*", + "lessThan": "7.0.1-42218-7", "versionType": "semver" }, { diff --git a/2024/0xxx/CVE-2024-0854.json b/2024/0xxx/CVE-2024-0854.json index bc149bbf666..4e3e5af3292 100644 --- a/2024/0xxx/CVE-2024-0854.json +++ b/2024/0xxx/CVE-2024-0854.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors." + "value": "URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors." } ] }, @@ -21,7 +21,7 @@ "description": [ { "lang": "eng", - "value": "CWE-601: URL Redirection to Untrusted Site ('Open Redirect')", + "value": "URL Redirection to Untrusted Site ('Open Redirect')", "cweId": "CWE-601" } ] @@ -52,7 +52,13 @@ { "version": "7.1", "status": "affected", - "lessThan": "7.1.*", + "lessThan": "7.1.1-42962-7", + "versionType": "semver" + }, + { + "version": "7.0", + "status": "affected", + "lessThan": "7.0.1-42218-7", "versionType": "semver" }, { @@ -99,15 +105,15 @@ "cvss": [ { "version": "3.1", - "baseScore": 4.1, + "baseScore": 5.4, "baseSeverity": "MEDIUM", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", - "confidentialityImpact": "NONE", + "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } diff --git a/2024/11xxx/CVE-2024-11925.json b/2024/11xxx/CVE-2024-11925.json index 6012c042cbb..1d1d27613d3 100644 --- a/2024/11xxx/CVE-2024-11925.json +++ b/2024/11xxx/CVE-2024-11925.json @@ -1,17 +1,85 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-11925", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@wordfence.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.6.7. This is due to the plugin not properly verifying a users identity when verifying an email address through the user_account_activation function. This makes it possible for unauthenticated attackers to log in as any user, including site administrators if the users email is known." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-288 Authentication Bypass Using an Alternate Path or Channel", + "cweId": "CWE-288" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856", + "product": { + "product_data": [ + { + "product_name": "JobSearch WP Job Board", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "*", + "version_value": "2.6.7" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/04bc8101-2676-4695-a498-f79be8221617?source=cve", + "refsource": "MISC", + "name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/04bc8101-2676-4695-a498-f79be8221617?source=cve" + }, + { + "url": "https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856", + "refsource": "MISC", + "name": "https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "Tonn" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" } ] } diff --git a/2024/11xxx/CVE-2024-11957.json b/2024/11xxx/CVE-2024-11957.json new file mode 100644 index 00000000000..6ba19442971 --- /dev/null +++ b/2024/11xxx/CVE-2024-11957.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-11957", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/36xxx/CVE-2024-36466.json b/2024/36xxx/CVE-2024-36466.json index f402b2a859d..51ad7d4e2dd 100644 --- a/2024/36xxx/CVE-2024-36466.json +++ b/2024/36xxx/CVE-2024-36466.json @@ -1,17 +1,139 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-36466", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "security@zabbix.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-290 Authentication Bypass by Spoofing", + "cweId": "CWE-290" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Zabbix", + "product": { + "product_data": [ + { + "product_name": "Zabbix", + "version": { + "version_data": [ + { + "version_value": "not down converted", + "x_cve_json_5_version_data": { + "versions": [ + { + "changes": [ + { + "at": "6.0.32rc1", + "status": "unaffected" + } + ], + "lessThanOrEqual": "6.0.31", + "status": "affected", + "version": "6.0.0", + "versionType": "git" + }, + { + "changes": [ + { + "at": "6.4.17rc1", + "status": "unaffected" + } + ], + "lessThanOrEqual": "6.4.16", + "status": "affected", + "version": "6.4.0", + "versionType": "git" + }, + { + "status": "affected", + "version": "7.0.0", + "versionType": "git" + } + ], + "defaultStatus": "unaffected" + } + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://support.zabbix.com/browse/ZBX-25635", + "refsource": "MISC", + "name": "https://support.zabbix.com/browse/ZBX-25635" + } + ] + }, + "generator": { + "engine": "Vulnogram 0.2.0" + }, + "source": { + "discovery": "EXTERNAL" + }, + "work_around": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Disabling SSO authentication method" + } + ], + "value": "Disabling SSO authentication method" + } + ], + "credits": [ + { + "lang": "en", + "value": "Zabbix wants to thank M\u00e1rk R\u00e1k\u00f3czi (reeeeeeeeeeee) for submitting this report on the HackerOne bug bounty platform." + } + ], + "impact": { + "cvss": [ + { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "version": "3.1" } ] }